CGRC · Question #404
When should the assessment team provide the briefing following the conclusion of testing to provide system management/operations personnel an opportunity to know the security posture and take…
The correct answer is A. Immediately. Following the conclusion of security testing, the assessment team should provide a briefing to system management and operations personnel immediately to enable prompt awareness of the security posture and facilitate immediate remedial actions. This ensures critical findings are…
Question
When should the assessment team provide the briefing following the conclusion of testing to provide system management/operations personnel an opportunity to know the security posture and take immediate actions; 24 hrs, 48 hrs, immediately)? Response:
Options
- AImmediately
- B24 hrs
- C48 hrs
- DLater
How the community answered
(33 responses)- A88% (29)
- B3% (1)
- C6% (2)
- D3% (1)
Why each option
Following the conclusion of security testing, the assessment team should provide a briefing to system management and operations personnel immediately to enable prompt awareness of the security posture and facilitate immediate remedial actions. This ensures critical findings are addressed without delay.
Providing the briefing immediately after testing concludes is crucial for system management/operations personnel to quickly understand the current security posture and take prompt action on any identified critical vulnerabilities or issues. Delaying the briefing could leave systems exposed to known risks for a longer period, increasing potential harm.
Waiting 24 hours could delay critical remediation efforts, leaving the system vulnerable for an unnecessarily extended period.
Waiting 48 hours is an even greater delay than 24 hours, further increasing the risk exposure and potential for harm from identified vulnerabilities.
"Later" is too vague and implies an unacceptable delay, contradicting the need for timely communication of security posture.
Concept tested: Post-assessment briefing timeliness
Topics
Community Discussion
No community discussion yet for this question.